diff --git a/.bootc-dev-infra-commit.txt b/.bootc-dev-infra-commit.txt
index 571a1b8..9464827 100644
--- a/.bootc-dev-infra-commit.txt
+++ b/.bootc-dev-infra-commit.txt
@@ -1 +1 @@
-eee9b691c9fcf5783ca044671dade3e32efd7e7b
+7b396396c7dcbcfe104a756ae0db45155394dadb
diff --git a/.github/workflows/openssf-scorecard-gate.yml b/.github/workflows/openssf-scorecard-gate.yml
deleted file mode 100644
index 830564a..0000000
--- a/.github/workflows/openssf-scorecard-gate.yml
+++ /dev/null
@@ -1,28 +0,0 @@
-# Gate PRs on OpenSSF Scorecard regressions.
-#
-# See also: https://github.com/ossf/scorecard/issues/1270
-name: OpenSSF Scorecard
-
-on:
-  pull_request:
-    branches:
-      - main
-
-permissions:
-  contents: read
-
-jobs:
-  scorecard:
-    name: Scorecard
-    runs-on: ubuntu-24.04
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-
-      - name: Check for regressions
-        uses: bootc-dev/actions/openssf-scorecard@main
-        with:
-          base-sha: ${{ github.event.pull_request.base.sha }}
-          head-sha: ${{ github.event.pull_request.head.sha }}
diff --git a/.github/workflows/rebase.yml b/.github/workflows/rebase.yml
deleted file mode 100644
index 68f329a..0000000
--- a/.github/workflows/rebase.yml
+++ /dev/null
@@ -1,45 +0,0 @@
-name: Automatic Rebase
-on:
-  pull_request:
-    types: [labeled]
-
-permissions:
-  contents: read
-
-jobs:
-  rebase:
-    name: Rebase
-    if: github.event.label.name == 'needs-rebase'
-    runs-on: ubuntu-latest
-    steps:
-      - name: Generate Actions Token
-        id: token
-        uses: actions/create-github-app-token@v2
-        with:
-          app-id: ${{ secrets.APP_ID }}
-          private-key: ${{ secrets.APP_PRIVATE_KEY }}
-          owner: ${{ github.repository_owner }}
-
-      - name: Checkout
-        uses: actions/checkout@v6
-        with:
-          token: ${{ steps.token.outputs.token }}
-          fetch-depth: 0
-
-      - name: Automatic Rebase
-        uses: peter-evans/rebase@v4
-        with:
-          token: ${{ steps.token.outputs.token }}
-
-      - name: Remove needs-rebase label
-        if: always()
-        uses: actions/github-script@v8
-        with:
-          github-token: ${{ steps.token.outputs.token }}
-          script: |
-            await github.rest.issues.removeLabel({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: context.issue.number,
-              name: 'needs-rebase'
-            });